The opposite pattern, starting with all permissions and then trying to deny a specific permission, is not secure, because there are many ways of expressing the same connection string.

• 而开始时即授予所有权限然后试图拒绝特定权限这一相反的做法并不安全,因为有多种方法可以表达相同的连接字符串。